Add suppression tags (#2939)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: api-clients-generation-pipeline[bot]

.generator/schemas/v2/openapi.yaml

@@ -46991,6 +46991,14 @@ components:
             the queries to search signals in the signal explorer.
           example: env:staging status:low
           type: string
+        tags:
+          description: List of tags associated with the suppression rule.
+          example:
+          - technique:T1110-brute-force
+          - source:cloudtrail
+          items:
+            type: string
+          type: array
         update_date:
           description: A Unix millisecond timestamp given the update date of the suppression
             rule.
@@ -47052,6 +47060,14 @@ components:
             same syntax as the queries to search signals in the Signals Explorer.
           example: env:staging status:low
           type: string
+        tags:
+          description: List of tags associated with the suppression rule.
+          example:
+          - technique:T1110-brute-force
+          - source:cloudtrail
+          items:
+            type: string
+          type: array
       required:
       - name
       - enabled
@@ -47147,6 +47163,14 @@ components:
             the queries to search signals in the signal explorer.
           example: env:staging status:low
           type: string
+        tags:
+          description: List of tags associated with the suppression rule.
+          example:
+          - technique:T1110-brute-force
+          - source:cloudtrail
+          items:
+            type: string
+          type: array
         version:
           description: The current version of the suppression. This is optional, but
             it can help prevent concurrent modifications.

examples/v2/security-monitoring/CreateSecurityMonitoringSuppression.py

@@ -25,6 +25,10 @@
             name="Example-Security-Monitoring",
             rule_query="type:log_detection source:cloudtrail",
             suppression_query="env:staging status:low",
+            tags=[
+                "technique:T1110-brute-force",
+                "source:cloudtrail",
+            ],
         ),
         type=SecurityMonitoringSuppressionType.SUPPRESSIONS,
     ),

src/datadog_api_client/v2/model/security_monitoring_suppression_attributes.py

@@ -3,7 +3,7 @@
 # Copyright 2019-Present Datadog, Inc.
 from __future__ import annotations
 
-from typing import Union, TYPE_CHECKING
+from typing import List, Union, TYPE_CHECKING
 
 from datadog_api_client.model_utils import (
     ModelNormal,
@@ -40,6 +40,7 @@ def openapi_types(_):
             "rule_query": (str,),
             "start_date": (int,),
             "suppression_query": (str,),
+            "tags": ([str],),
             "update_date": (int,),
             "updater": (SecurityMonitoringUser,),
             "version": (int,),
@@ -57,6 +58,7 @@ def openapi_types(_):
         "rule_query": "rule_query",
         "start_date": "start_date",
         "suppression_query": "suppression_query",
+        "tags": "tags",
         "update_date": "update_date",
         "updater": "updater",
         "version": "version",
@@ -75,6 +77,7 @@ def __init__(
         rule_query: Union[str, UnsetType] = unset,
         start_date: Union[int, UnsetType] = unset,
         suppression_query: Union[str, UnsetType] = unset,
+        tags: Union[List[str], UnsetType] = unset,
         update_date: Union[int, UnsetType] = unset,
         updater: Union[SecurityMonitoringUser, UnsetType] = unset,
         version: Union[int, UnsetType] = unset,
@@ -116,6 +119,9 @@ def __init__(
         :param suppression_query: The suppression query of the suppression rule. If a signal matches this query, it is suppressed and not triggered. Same syntax as the queries to search signals in the signal explorer.
         :type suppression_query: str, optional
 
+        :param tags: List of tags associated with the suppression rule.
+        :type tags: [str], optional
+
         :param update_date: A Unix millisecond timestamp given the update date of the suppression rule.
         :type update_date: int, optional
 
@@ -147,6 +153,8 @@ def __init__(
             kwargs["start_date"] = start_date
         if suppression_query is not unset:
             kwargs["suppression_query"] = suppression_query
+        if tags is not unset:
+            kwargs["tags"] = tags
         if update_date is not unset:
             kwargs["update_date"] = update_date
         if updater is not unset:

src/datadog_api_client/v2/model/security_monitoring_suppression_create_attributes.py

@@ -3,7 +3,7 @@
 # Copyright 2019-Present Datadog, Inc.
 from __future__ import annotations
 
-from typing import Union
+from typing import List, Union
 
 from datadog_api_client.model_utils import (
     ModelNormal,
@@ -25,6 +25,7 @@ def openapi_types(_):
             "rule_query": (str,),
             "start_date": (int,),
             "suppression_query": (str,),
+            "tags": ([str],),
         }
 
     attribute_map = {
@@ -36,6 +37,7 @@ def openapi_types(_):
         "rule_query": "rule_query",
         "start_date": "start_date",
         "suppression_query": "suppression_query",
+        "tags": "tags",
     }
 
     def __init__(
@@ -48,6 +50,7 @@ def __init__(
         expiration_date: Union[int, UnsetType] = unset,
         start_date: Union[int, UnsetType] = unset,
         suppression_query: Union[str, UnsetType] = unset,
+        tags: Union[List[str], UnsetType] = unset,
         **kwargs,
     ):
         """
@@ -76,6 +79,9 @@ def __init__(
 
         :param suppression_query: The suppression query of the suppression rule. If a signal matches this query, it is suppressed and is not triggered. It uses the same syntax as the queries to search signals in the Signals Explorer.
         :type suppression_query: str, optional
+
+        :param tags: List of tags associated with the suppression rule.
+        :type tags: [str], optional
         """
         if data_exclusion_query is not unset:
             kwargs["data_exclusion_query"] = data_exclusion_query
@@ -87,6 +93,8 @@ def __init__(
             kwargs["start_date"] = start_date
         if suppression_query is not unset:
             kwargs["suppression_query"] = suppression_query
+        if tags is not unset:
+            kwargs["tags"] = tags
         super().__init__(kwargs)
 
         self_.enabled = enabled

src/datadog_api_client/v2/model/security_monitoring_suppression_update_attributes.py

@@ -3,7 +3,7 @@
 # Copyright 2019-Present Datadog, Inc.
 from __future__ import annotations
 
-from typing import Union
+from typing import List, Union
 
 from datadog_api_client.model_utils import (
     ModelNormal,
@@ -32,6 +32,7 @@ def openapi_types(_):
             "rule_query": (str,),
             "start_date": (int, none_type),
             "suppression_query": (str,),
+            "tags": ([str],),
             "version": (int,),
         }
 
@@ -44,6 +45,7 @@ def openapi_types(_):
         "rule_query": "rule_query",
         "start_date": "start_date",
         "suppression_query": "suppression_query",
+        "tags": "tags",
         "version": "version",
     }
 
@@ -57,6 +59,7 @@ def __init__(
         rule_query: Union[str, UnsetType] = unset,
         start_date: Union[int, none_type, UnsetType] = unset,
         suppression_query: Union[str, UnsetType] = unset,
+        tags: Union[List[str], UnsetType] = unset,
         version: Union[int, UnsetType] = unset,
         **kwargs,
     ):
@@ -87,6 +90,9 @@ def __init__(
         :param suppression_query: The suppression query of the suppression rule. If a signal matches this query, it is suppressed and not triggered. Same syntax as the queries to search signals in the signal explorer.
         :type suppression_query: str, optional
 
+        :param tags: List of tags associated with the suppression rule.
+        :type tags: [str], optional
+
         :param version: The current version of the suppression. This is optional, but it can help prevent concurrent modifications.
         :type version: int, optional
         """
@@ -106,6 +112,8 @@ def __init__(
             kwargs["start_date"] = start_date
         if suppression_query is not unset:
             kwargs["suppression_query"] = suppression_query
+        if tags is not unset:
+            kwargs["tags"] = tags
         if version is not unset:
             kwargs["version"] = version
         super().__init__(kwargs)

tests/v2/cassettes/test_scenarios/test_create_a_suppression_rule_returns_ok_response.frozen

@@ -1 +1 @@
-2024-11-27T15:22:34.711Z
+2025-11-07T12:27:25.514Z

tests/v2/cassettes/test_scenarios/test_create_a_suppression_rule_returns_ok_response.yaml

@@ -1,9 +1,9 @@
 interactions:
 - request:
     body: '{"data":{"attributes":{"description":"This rule suppresses low-severity
-      signals in staging environments.","enabled":true,"expiration_date":1734535354000,"name":"Test-Create_a_suppression_rule_returns_OK_response-1732720954","rule_query":"type:log_detection
-      source:cloudtrail","start_date":1733584954000,"suppression_query":"env:staging
-      status:low"},"type":"suppressions"}}'
+      signals in staging environments.","enabled":true,"expiration_date":1764332845000,"name":"Test-Create_a_suppression_rule_returns_OK_response-1762518445","rule_query":"type:log_detection
+      source:cloudtrail","start_date":1763382445000,"suppression_query":"env:staging
+      status:low","tags":["technique:T1110-brute-force","source:cloudtrail"]},"type":"suppressions"}}'
     headers:
       accept:
       - application/json
@@ -13,10 +13,12 @@ interactions:
     uri: https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions
   response:
     body:
-      string: '{"data":{"id":"ejv-ksi-r4j","type":"suppressions","attributes":{"creation_date":1732720954868,"creator":{"handle":"frog@datadoghq.com","name":""},"data_exclusion_query":"","description":"This
-        rule suppresses low-severity signals in staging environments.","editable":true,"enabled":true,"expiration_date":1734535354000,"name":"Test-Create_a_suppression_rule_returns_OK_response-1732720954","rule_query":"type:log_detection
-        source:cloudtrail","start_date":1733584954000,"suppression_query":"env:staging
-        status:low","update_date":1732720954868,"updater":{"handle":"frog@datadoghq.com","name":""},"version":1}}}'
+      string: '{"data":{"id":"oxk-jlo-pc8","type":"suppressions","attributes":{"creation_date":1762518446390,"creator":{"handle":"9919ec9b-ebc7-49ee-8dc8-03626e717cca","name":"CI
+        Account"},"data_exclusion_query":"","description":"This rule suppresses low-severity
+        signals in staging environments.","editable":true,"enabled":true,"expiration_date":1764332845000,"name":"Test-Create_a_suppression_rule_returns_OK_response-1762518445","rule_query":"type:log_detection
+        source:cloudtrail","start_date":1763382445000,"suppression_query":"env:staging
+        status:low","tags":["source:cloudtrail","technique:T1110-brute-force"],"update_date":1762518446390,"updater":{"handle":"9919ec9b-ebc7-49ee-8dc8-03626e717cca","name":"CI
+        Account"},"version":1}}}'
     headers:
       content-type:
       - application/vnd.api+json
@@ -29,7 +31,7 @@ interactions:
       accept:
       - '*/*'
     method: DELETE
-    uri: https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/ejv-ksi-r4j
+    uri: https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/oxk-jlo-pc8
   response:
     body:
       string: ''

tests/v2/cassettes/test_scenarios/test_delete_a_suppression_rule_returns_ok_response.frozen

@@ -1 +1 @@
-2024-05-10T16:34:39.853Z
+2025-11-07T12:27:26.759Z

tests/v2/cassettes/test_scenarios/test_delete_a_suppression_rule_returns_ok_response.yaml

@@ -1,6 +1,6 @@
 interactions:
 - request:
-    body: '{"data":{"attributes":{"description":"Test-Delete_a_suppression_rule_returns_OK_response-1715358879","enabled":true,"name":"Test-Delete_a_suppression_rule_returns_OK_response-1715358879","rule_query":"source:cloudtrail","suppression_query":"env:test"},"type":"suppressions"}}'
+    body: '{"data":{"attributes":{"description":"Test-Delete_a_suppression_rule_returns_OK_response-1762518446","enabled":true,"name":"Test-Delete_a_suppression_rule_returns_OK_response-1762518446","rule_query":"source:cloudtrail","suppression_query":"env:test","tags":["technique:T1110-brute-force","source:cloudtrail"]},"type":"suppressions"}}'
     headers:
       accept:
       - application/json
@@ -10,12 +10,12 @@ interactions:
     uri: https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions
   response:
     body:
-      string: '{"data":{"id":"csf-zrg-af0","attributes":{"name":"Test-Delete_a_suppression_rule_returns_OK_response-1715358879","enabled":true,"description":"Test-Delete_a_suppression_rule_returns_OK_response-1715358879","rule_query":"source:cloudtrail","suppression_query":"env:test","data_exclusion_query":"","version":1,"creation_date":1715358880145,"update_date":1715358880145,"creator":{"name":null,"handle":"frog@datadoghq.com"},"updater":{"name":null,"handle":"frog@datadoghq.com"}},"type":"suppressions"}}
-
-        '
+      string: '{"data":{"id":"uea-lab-big","type":"suppressions","attributes":{"creation_date":1762518447002,"creator":{"handle":"9919ec9b-ebc7-49ee-8dc8-03626e717cca","name":"CI
+        Account"},"data_exclusion_query":"","description":"Test-Delete_a_suppression_rule_returns_OK_response-1762518446","editable":true,"enabled":true,"name":"Test-Delete_a_suppression_rule_returns_OK_response-1762518446","rule_query":"source:cloudtrail","suppression_query":"env:test","tags":["source:cloudtrail","technique:T1110-brute-force"],"update_date":1762518447002,"updater":{"handle":"9919ec9b-ebc7-49ee-8dc8-03626e717cca","name":"CI
+        Account"},"version":1}}}'
     headers:
       content-type:
-      - application/json
+      - application/vnd.api+json
     status:
       code: 200
       message: OK
@@ -25,13 +25,11 @@ interactions:
       accept:
       - '*/*'
     method: DELETE
-    uri: https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/csf-zrg-af0
+    uri: https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/uea-lab-big
   response:
     body:
       string: ''
-    headers:
-      content-type:
-      - text/html; charset=utf-8
+    headers: {}
     status:
       code: 204
       message: No Content
@@ -41,12 +39,10 @@ interactions:
       accept:
       - '*/*'
     method: DELETE
-    uri: https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/csf-zrg-af0
+    uri: https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/uea-lab-big
   response:
     body:
-      string: '{"errors":["not_found(Suppression with ID csf-zrg-af0 not found)"]}
-
-        '
+      string: '{"errors":["not_found(Suppression with ID uea-lab-big not found)"]}'
     headers:
       content-type:
       - application/json

tests/v2/cassettes/test_scenarios/test_get_a_suppression_rule_returns_ok_response.frozen

@@ -1 +1 @@
-2024-05-10T16:34:46.398Z
+2025-11-07T12:27:27.654Z